902 matches found
Apache 1.3 - Artificially Long Slash Path Directory Listing (2)
// source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementations of the UNIX operating system...
[SECURITY] [DSA 080-1] New ht://Dig packages fix vulnerability
---------------------------------------------------------------------------- Debian Security Advisory DSA 080-1 [email protected] http://www.debian.org/security/ Martin Schulze October 17th, 2001 - ---------------------------------------------------------------------------- Package : htdig...
CVE-1999-1067
CVE-1999-1067 involves SGI MachineInfo CGI program, installed by default on some SGI web servers, that prints potentially sensitive system status information. The issue is a information-disclosure through the CGI output, enabling remote attackers to gather details about the host. The connected re...
CVE-1999-1067
SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status information, which could be used by remote attackers for information gathering activities...
[SECURITY] [DSA-067-1] New versions of apache, fixes index bug
------------------------------------------------------------------------ Debian Security Advisory DSA-067-1 [email protected] http://www.debian.org/security/ Robert van der Meulen July 28, 2001 - ------------------------------------------------------------------------ Package :...
Check Point Firewall-1 4 Securemote - Network Information Leak
source: https://www.securityfocus.com/bid/3058/info SecureRemote is the proprietary VPN infrastructure designed by Check Point Software, and included with some versions of Firewall-1. A problem with the package allows remote users to gain information about internal networks. Older versions of the...
Cobalt Cube Webmail directory traversal
I just got a new Cobalt Cube today and I have been poking around at it for security issues... I noticed this minor issue in the webmail system. Your users are not aloud to have shell access by default however if they malform their mailbox requests they can read local files with the perms of the...
Apache 1.3 - Artificially Long Slash Path Directory Listing (3)
Apache 1.3 - Artificially Long Slash Path Directory Listing 3 source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, include...
Apache 1.3 - Artificially Long Slash Path Directory Listing (4)
Apache 1.3 - Artificially Long Slash Path Directory Listing 4 source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, include...
Apache 1.3 - Artificially Long Slash Path Directory Listing (1)
Apache 1.3 - Artificially Long Slash Path Directory Listing 1 source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, include...
Apache 1.3 - Artificially Long Slash Path Directory Listing (1)
source: https://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementations of the UNIX operating system an...
[SECURITY] [DSA 051-1] New Netscape packages available
---------------------------------------------------------------------------- Debian Security Advisory DSA 051-1 [email protected] http://www.debian.org/security/ Martin Schulze April 23, 2001 - ---------------------------------------------------------------------------- Package : netscape...
cfingerd Version Detection
Nessus was able to detect the version of cfingerd running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10651; scriptversion "1.13"; scriptnameenglish:"cfingerd Version Detection"; scriptsummaryenglish:"cfingerd version"; scriptsetattribute...
Дырка в ConsoleServer (login weakness, information gethering)
В telnet не ограничено число попыток ввода пароля, Через административное подключение до логина можно узнать важную информацию о системе...
eTrust Access Control - Root compromise for default install
eTrust Access Control formerly SeOS default installation vulnerable to root level compromise In working with eTrust Access ControlSeOS we found that the default installation can be compromised in order to gain root access to the machines. The attacker is required to be on the same network as the...
Netscape PublishingXPert 2.0/2.2/2.5 - Local File Reading
// source: https://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.htm does not sufficiently validate input. A problem with...
CDE Subprocess Control Service (dtspcd) Detection
The 'dtspcd' service is running. This service deals with the CDE interface for the X11 system. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10833; scriptversion"$Revision: 1.25 $"; scriptcvsdate"$Date: 2011/03/11 21:52:32 $"; scriptnameenglish:"CDE Subprocess Contro...
sun-snmp.txt
Vulnerabilities in Sun Solaris 2.6 SNMP Jeremy Rauch April 1998 Sun's snmpd implementation as supplied with Solaris 2.6 includes what used to be shipped with Sun's Solstice Admin suite as it's snmpd, and associated subagents. Sun's snmpd is actually pretty interesting, in that it supports a numbe...
Finger 0@host Unused Account Disclosure
The remote host is running a 'finger' service that suffers from an information disclosure vulnerability. Specifically, it allows an unauthenticated attacker to display a list of accounts on the remote host that have never been used. This list can help an attacker to guess the operating system typ...
Finger Recursive Request Arbitrary Site Redirection
The remote finger service accepts redirect requests. That is, users can perform requests like : finger user@host@victim This allows an attacker to use this computer as a relay to gather information on a third-party network. In addition, this type of syntax can be used to create a denial of servic...